| 5.1.6. Memory Analysis? |
| 5.1.6.3. Execute Process Explorer for manual Process Analysis |
![]() | 5.1.6.3.1. LINK http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx |
| 5.1.6.1. Mandiant Memoryze |
| 5.1.6.2. Win32.dd and Win64.exe |
Process Explorer http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx